Staff Product Security Engineer

Senior Cybersecurity M&A Integration Engineer

6-Month Contract | Hybrid – Lowell, MA or Sunrise, FL

We are seeking an experienced Senior Cybersecurity M&A Integration Engineer to support cybersecurity due diligence and post-acquisition integration initiatives. This individual will play a critical role in assessing the security posture of acquisition targets, identifying technical risks, validating existing security controls, and developing actionable integration and remediation plans.

The ideal candidate brings deep, hands-on cybersecurity engineering expertise across endpoint, identity, network, cloud, and infrastructure security, along with experience supporting mergers and acquisitions.

Key Responsibilities

• Conduct cybersecurity due diligence assessments of acquisition targets, identifying security gaps, technical risks, and control deficiencies.
• Independently validate security configurations and control implementations across endpoint, identity, network, cloud, and infrastructure environments.
• Perform compromise assessments and threat hunting, including forensic data collection, telemetry analysis, endpoint triage, and identification of Indicators of Compromise (IoCs).
• Evaluate endpoint security technologies, including EDR, antivirus, disk encryption, device control, MDM, Group Policy, and endpoint hardening across Windows, macOS, and Linux.
• Assess network and edge security architecture, including firewalls, IDS/IPS, web proxies, SSL/TLS inspection, WAFs, VPNs, ZTNA, Citrix, and network segmentation.
• Review identity and access management controls, including SAML, OAuth, federation, MFA, privileged access management, conditional access, and Zero Trust architectures.
• Evaluate PKI, certificate lifecycle management, secrets management, TLS configurations, and legacy protocol risks.
• Assess email security platforms, anti-phishing controls, SPF, DKIM, DMARC, and cloud email security solutions.
• Review SIEM platforms and security telemetry, including log source validation, ingestion sizing, use cases, logging coverage, and licensing requirements.
• Gather and validate infrastructure metrics from Active Directory, cloud environments, CMDBs, endpoint management platforms, vulnerability scanners, and SIEM solutions.
• Support security platform integration and rationalization involving technologies such as CrowdStrike, Zscaler, Splunk, Wiz, and Microsoft security solutions.
• Develop Day 1 and Day 100 cybersecurity integration plans, including tooling consolidation, migration sequencing, and risk-based remediation priorities.
• Execute and validate remediation activities, including security agent deployments, MFA implementation, API security improvements, protocol hardening, and endpoint policy enforcement.
• Partner with target-company administrators, infrastructure teams, security personnel, consultants, and acquisition stakeholders to drive technical outcomes.
• Translate technical findings into executive-level risk assessments, remediation roadmaps, integration runbooks, and budget forecasts.

Required Qualifications

• Minimum of 7 years of progressively responsible cybersecurity experience in areas such as security engineering, security architecture, incident response, infrastructure security, or enterprise technology integrations.
• Extensive hands-on experience with cybersecurity assessments, security control validation, and technical risk identification.
• Strong knowledge across endpoint, identity, network, cloud, and infrastructure security.
• Experience with compromise assessments, threat hunting, forensic data collection, and incident response.
• Practical experience with enterprise security platforms and technologies.
• Ability to develop and execute security remediation and integration plans.
• Strong technical leadership, communication, and stakeholder management skills.
• Ability to communicate complex technical findings and recommendations to both engineering teams and executive leadership.

Strongly Preferred:

• Direct experience participating in M&A cybersecurity due diligence and/or post-acquisition security integration.
• Experience developing Day 1 and Day 100 integration strategies.
• Experience consolidating security tools and environments following acquisitions.

Position Details

• Location: Lowell, MA or Sunrise, FL
• Work Arrangement: Hybrid – onsite Tuesday, Wednesday, and Thursday; remote Monday and Friday
• Schedule: Monday–Friday, 8:00 AM–5:00 PM Eastern
• Hours: 40 hours per week, with a one-hour lunch
• Overtime: No overtime or weekend work
• Contract: Initial 6-month contract

Interested?

If you have hands-on cybersecurity engineering experience and have supported M&A due diligence or post-acquisition integration, I’d love to connect. Please reach out or apply to learn more about this opportunity.